Vendor Management Analyst I or II (DOE)

Rogue Credit Union•Medford, OR

About The Position

Rogue Credit Union is a member-owned, not-for-profit financial cooperative headquartered in the Rogue Valley located in beautiful southern Oregon. Providing services to our members in select Oregon, Idaho and California counties. We strive to make an impact in the communities we serve by living, giving, and supporting local. Our mission is to provide exceptional member experiences that build mutually beneficial relationships to create the most loyal members in the nation. Here at Rogue, we believe in having a culture of happy team members who feel supported, have the chance to grow their careers, and LOVE where they work! Role: Responsible for the administration and day-to-day maintenance of the credit union's Vendor Management (VM) Program ensuring effective Third-Party Risk Management (TPRM). Ensures all operations under the VM program align with applicable regulations such as, but not limited to, the Gramm-Leach-Bliley Act (GLBA), National Credit Union Administration (NCUA) Supervisory Letter 07-01, and other interagency guidance from Federal Banking Regulators. Supports the pursuit of the credit union's Purpose, Vision, Mission, and Values through promoting safety and soundness and assuring the effectiveness of the assigned program responsibilities.

Requirements

One year to three years of similar or related experience.
A two-year college degree, or (2) completion of a specialized certification or licensing, or (3) completion of specialized training courses conducted by vendors, or (4) job-specific skills acquired through an apprenticeship program.
Excellent organizational and time management skills.
Must be highly productive, self-managed, resourceful, and dependable.
Should possess a strong eye for details and accuracy, and strategic, critical thinking skills.
Must have excellent verbal and written communication and the ability to motivate or influence others using diplomacy.
Must possess excellent PC skills with the aptitude to learn new software.
Excellent organizational and time management skills.
Must be highly productive, self-managed, resourceful, and dependable.
Should possess a strong eye for details and accuracy, and strategic, critical thinking skills.
Must have excellent verbal and written communication and the ability to motivate or influence others using diplomacy.
Must possess excellent PC skills with the aptitude to learn new software.
Some lifting required (up to 30 pounds), continuous sitting, occasional standing and occasional walking.
Finger dexterity while using computer.
Occasional talking and hearing in person and on the telephone.
Continuous clarity of vision at 20 inches or less and continuous clarity of vision at 20 feet or more.
Must be able to remain in a stationary position, often standing or sitting for prolonged periods.
Repeating motions that may include the wrists, hands and/or fingers while using computer.
Communicating with others to exchange information.
Perceiving the nature of sounds at normal speaking levels or without correction.
Ability to receive detailed information through oral communication, and make fine discernments in sound.
Close and continuous visual acuity to perform activities such as: preparing and analyzing data and figures, transcribing, viewing a computer terminal and extensive reading.

Responsibilities

Responsible for administering the VM program to ensure program alignment with the established maturity roadmap, regulatory requirements and current industry best practices.
Assists with vendor onboarding, ongoing due diligence, contract review, and offboarding activities by performing vendor classification and inherent risk scoping to determine appropriate due diligence requirements.
Maintains vendor records within the Governance, Risk and Compliance (GRC) system and vendor ticketing system to support effective tracking, monitoring, and reporting of third-party relationships.
Works collaboratively with vendor owners, and internal stakeholders to ensure vendor records are accurate, complete, and maintained in a timely manner while supporting regulatory compliance, member service, and loyalty.
Supports third-party risk assessment activities with the collection, coordination, and tracking of vendor due diligence documentation, including questionnaires and supporting materials.
Works with subject matter experts (SME) to support completion of reviews.
Communicates with vendor owners across the organization, including senior leaders, regarding documentation requirements, timelines, and review status, and supports ongoing vendor monitoring activities as triggered by system notifications.
Supports data collection, reporting, and maintenance of third-party risk information within the GRC platform.
Supports audit and regulatory examination readiness by ensuring vendor documentation and assessment records are complete and available as requested.
Proactively performs other related duties as needed or assigned